-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 26 Jun 2026 18:23:21 +0300 Source: dhcpcd Binary: dhcpcd-base dhcpcd-base-dbgsym Architecture: armhf Version: 1:10.1.0-11+deb13u3 Distribution: trixie Urgency: medium Maintainer: armhf Build Daemon (arm-ubc-03) Changed-By: Martin-Éric Racine Description: dhcpcd-base - DHCPv4 and DHCPv6 dual-stack client (binaries and exit hooks) Closes: 1140767 Changes: dhcpcd (1:10.1.0-11+deb13u3) trixie; urgency=medium . * [patches] (Closes: #1140767) + Cherry-pick upstream fix for CVE-2025-70102 (commit 117742d). + Cherry-pick upstream fix for CVE-2026-56113 (commit 5733d3c). + Cherry-pick upstream fix for CVE-2026-56114 (commit 2f00c7b). + Cherry-pick upstream fix for CVE-2026-56116 (commit 708b4a5). + Cherry-pick upstream fix for CVE-2026-56117 (commit 78ea09e). Checksums-Sha1: 0c7b9a8b0a0ca8d8ae5962caa0c956ca79cbad3e 463312 dhcpcd-base-dbgsym_10.1.0-11+deb13u3_armhf.deb b753a79d3bdc95df75801ff502e69474043d9051 177536 dhcpcd-base_10.1.0-11+deb13u3_armhf.deb 938ff0a9e86f479d1f47acbdcc931100f2d48b16 6093 dhcpcd_10.1.0-11+deb13u3_armhf-buildd.buildinfo Checksums-Sha256: 2a69835373db86e5f5f3f62fc8a3c45c97b16cdd4832cf2f5fec98935255e3d7 463312 dhcpcd-base-dbgsym_10.1.0-11+deb13u3_armhf.deb e85a7a40f48c1cf9adf7406b0debc8a89be561d78baaab2de6836a2784a37724 177536 dhcpcd-base_10.1.0-11+deb13u3_armhf.deb ac471339b55887ab74b4b168422456140639ca28b350e8b76580e297dfc588b8 6093 dhcpcd_10.1.0-11+deb13u3_armhf-buildd.buildinfo Files: fdc3c2c867639a5b5f1067740dd3bfe2 463312 debug optional dhcpcd-base-dbgsym_10.1.0-11+deb13u3_armhf.deb e0b01768c7c760733326a503b78757c8 177536 net important dhcpcd-base_10.1.0-11+deb13u3_armhf.deb fd164df7ca79719b9749cfb12a39c85b 6093 net optional dhcpcd_10.1.0-11+deb13u3_armhf-buildd.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE2kd8oHy+LXk/nybqvzDqKQSGl8UFAmpEV1IACgkQvzDqKQSG l8WtQQ//WzIB9KSIb//FokJ+Qb43z0n4P+Q5QrVmmn/XNyFlL/i2zO/kXZ+mVp7H 8TKjSVaZiogGr9pb42RVo7IPRKvUG8CJmxdtc5c4TDl5McoszcS0hANvI+b/UtBJ k05ccPkdsyTeV5HTAic+tM7StCvVkHtrdJnMve/r9dU3tp60u52u3Q8BM2b3GYsD x12aNsJvtlv4Anr+Xq2Ky4mr5KksGzmnY43sWoos/dYBEnedayzBL8mxev5VDJuk Z0dVSQuy6sjZ6KpcGhID7nkUsAtdC3N5jXqHENUfjSoV99gGXWZlJTMtuxUwuCGB RVxocAuD4ObR82tZbX+ilgkdJr3Bd5JJyzi7V11akSdYf4ilF1MyAKUAo7xIAqZY /Du/NkD1oFGwqvX14SSw1qFnLtQ4M6FM41WhUfsrH3Xd0nRg/1PLj10KqLPym8AO JlKC/5RJ/cuvL0HQmkWi+cIze6+d4MWDeLMBcJV4/lm3DMkG2cIBCLgclA6jDs2F Rw1+7G4FGnUlUiXxaJyahjdeOctv8vRWeMGbqmlrKGi9nsufJJoQFdDPKLYUlS6F 2/xNMcihIx1CMcWbkuU/dkXofCtnD6urIm4opxS8cNUStKwGZudl8dknuvHUY3SK vkiaafQbKiI76/Vz3yi3uStxnzUAeMjoT8yxsvZd0/ficGxPLn0= =+rSS -----END PGP SIGNATURE-----